Lose the source port check. Too many folks are going thru Port and

Address Translators, and present wisdom says that one should not
trust source ports anyway.

bk: 3c4755bfX-q93gSrOSHjQVFlkz0M6w

diff --git a/ntpd/ntp_proto.c b/ntpd/ntp_proto.c
index b5bb80f3fbc8520a4ad6fce2b1a1e5a6127b3418..fc95016e52a069e278525fc7c843fa30a72fecc0 100644 (file)
--- a/ntpd/ntp_proto.c
+++ b/ntpd/ntp_proto.c
@@ -309,11 +309,7 @@ receive(
 #endif
        if (restrict_mask & RES_IGNORE)
                return;                         /* no anything */
-       if (!(SRCPORT(&rbufp->recv_srcadr) == NTP_PORT ||
-           SRCPORT(&rbufp->recv_srcadr) >= IPPORT_RESERVED)) {
-               sys_badlength++;
-               return;                         /* invalid port */
-       }
+
        pkt = &rbufp->recv_pkt;
        if (PKT_VERSION(pkt->li_vn_mode) == NTP_VERSION) {
                sys_newversionpkt++;            /* new version */